Jenkins build is back to stable : pulsar-master #242

[Apache Jenkins Server]

See 

Jenkins build is still unstable: pulsar-master #241

[Apache Jenkins Server]

See 

RE: ApacheCon North America 2018, September 24-28, Montreal

[Nozomi Kurihara]

Hi,


We (Yahoo! JAPAN) are planning to talk about our use cases on ApacheCon.


Thanks,

Nozomi


差出人: Matteo Merli 
送信日時: 2018年1月31日 2:07:14
宛先: dev@pulsar.incubator.apache.org
件名: Fwd: ApacheCon North America 2018, September 24-28, Montreal

Anyone is interested in submitting talks proposals?

-- Forwarded message -
From: Rich Bowen 
Date: Tue, Jan 30, 2018 at 8:52 AM
Subject: ApacheCon North America 2018, September 24-28, Montreal
To: 


As you may have seen on the Apache blog -
https://blogs.apache.org/foundation/entry/the-apache-software-foundation-announces28
- we will be holding ApacheCon North America in Montreal, Canada,
September 24-28, at the Marriott.

More details will be coming as fast as we have them, but you can get
started at http://apachecon.com/ and by following us on @ApacheCon on
Twitter.

Also, note that the CFP is already open. Follow the link from
http://apachecon.com/acna18/
--
Matteo Merli

Jenkins build became unstable: pulsar-master #240

[Apache Jenkins Server]

See 

Jenkins build is back to stable : pulsar-master #239

[Apache Jenkins Server]

See 

Jenkins build is still unstable: pulsar-master #238

[Apache Jenkins Server]

See 

Jenkins build is still unstable: pulsar-master #237

[Apache Jenkins Server]

See 

Re: Download page - crypto files links

[Dave Fisher]

LGTM

> On Jan 30, 2018, at 10:27 AM, Matteo Merli  wrote:
> 
> Dave,
> 
> I have created https://github.com/apache/incubator-pulsar/pull/1148 with a
> fix for this.
> 
> Matteo
> 
> On Tue, Jan 30, 2018 at 9:59 AM Matteo Merli  wrote:
> 
>> Oh, I see. I think I had misread the last comment on
>> https://github.com/apache/incubator-pulsar/issues/986
>> 
>> So, the download links for the tgzs, should always point to the mirrors,
>> while KEYS and signatures will all come from dist with HTTPS.
>> 
>> I'll make the change quickly, thanks for pointing this out.
>> 
>> Matteo
>> 
>> On Tue, Jan 30, 2018 at 9:53 AM Dave Fisher  wrote:
>> 
>>> Hi -
>>> 
>>> I just noticed that the links to the current release asc, md5, and sha512
>>> are currently pointing to the mirrors. These need to be adjusted to point
>>> to the location at dist.apache.org. The reason is that a mirror could be
>>> compromised or corrupted and these small files used to verify a download
>>> should be from the master source.
>>> 
>>> Regards,
>>> Dave
>>> 
>> --
>> Matteo Merli
>> 
>> 
> --
> Matteo Merli
> 



signature.asc
Description: Message signed with OpenPGP

Jenkins build became unstable: pulsar-master #236

[Apache Jenkins Server]

See 

Re: Download page - crypto files links

[Matteo Merli]

Dave,

I have created https://github.com/apache/incubator-pulsar/pull/1148 with a
fix for this.

Matteo

On Tue, Jan 30, 2018 at 9:59 AM Matteo Merli  wrote:

> Oh, I see. I think I had misread the last comment on
> https://github.com/apache/incubator-pulsar/issues/986
>
> So, the download links for the tgzs, should always point to the mirrors,
> while KEYS and signatures will all come from dist with HTTPS.
>
> I'll make the change quickly, thanks for pointing this out.
>
> Matteo
>
> On Tue, Jan 30, 2018 at 9:53 AM Dave Fisher  wrote:
>
>> Hi -
>>
>> I just noticed that the links to the current release asc, md5, and sha512
>> are currently pointing to the mirrors. These need to be adjusted to point
>> to the location at dist.apache.org. The reason is that a mirror could be
>> compromised or corrupted and these small files used to verify a download
>> should be from the master source.
>>
>> Regards,
>> Dave
>>
> --
> Matteo Merli
> 
>
-- 
Matteo Merli

Re: Download page - crypto files links

[Matteo Merli]

Oh, I see. I think I had misread the last comment on
https://github.com/apache/incubator-pulsar/issues/986

So, the download links for the tgzs, should always point to the mirrors,
while KEYS and signatures will all come from dist with HTTPS.

I'll make the change quickly, thanks for pointing this out.

Matteo

On Tue, Jan 30, 2018 at 9:53 AM Dave Fisher  wrote:

> Hi -
>
> I just noticed that the links to the current release asc, md5, and sha512
> are currently pointing to the mirrors. These need to be adjusted to point
> to the location at dist.apache.org. The reason is that a mirror could be
> compromised or corrupted and these small files used to verify a download
> should be from the master source.
>
> Regards,
> Dave
>
-- 
Matteo Merli

Download page - crypto files links

[Dave Fisher]

Hi -

I just noticed that the links to the current release asc, md5, and sha512 are 
currently pointing to the mirrors. These need to be adjusted to point to the 
location at dist.apache.org. The reason is that a mirror could be compromised 
or corrupted and these small files used to verify a download should be from the 
master source.

Regards,
Dave


signature.asc
Description: Message signed with OpenPGP

Fwd: ApacheCon North America 2018, September 24-28, Montreal

[Matteo Merli]

Anyone is interested in submitting talks proposals?

-- Forwarded message -
From: Rich Bowen 
Date: Tue, Jan 30, 2018 at 8:52 AM
Subject: ApacheCon North America 2018, September 24-28, Montreal
To: 


As you may have seen on the Apache blog -
https://blogs.apache.org/foundation/entry/the-apache-software-foundation-announces28
- we will be holding ApacheCon North America in Montreal, Canada,
September 24-28, at the Marriott.

More details will be coming as fast as we have them, but you can get
started at http://apachecon.com/ and by following us on @ApacheCon on
Twitter.

Also, note that the CFP is already open. Follow the link from
http://apachecon.com/acna18/
-- 
Matteo Merli